Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

https://github.com/barathkumarpm/social-engineering-attacks

a Python script implementing a login authentication process with OTP verification via email. The script prompts users to enter their credentials, and upon successful authentication, requests their email address for OTP delivery. After validating the email format, an OTP is generated and sent to the provided email.
https://github.com/barathkumarpm/social-engineering-attacks

Last synced: about 1 year ago
JSON representation

a Python script implementing a login authentication process with OTP verification via email. The script prompts users to enter their credentials, and upon successful authentication, requests their email address for OTP delivery. After validating the email format, an OTP is generated and sent to the provided email.

Awesome Lists containing this project

README 

          
# Social-Engineering-Attacks



Social engineering attacks are manipulative techniques employed by malicious actors to exploit human psychology and gain unauthorized access to sensitive information or systems. These attacks leverage psychological and emotional manipulation rather than relying on technical vulnerabilities. Here are some common types of social engineering attacks:



Phishing:



Email Phishing: Attackers send deceptive emails that appear to be from a legitimate source, often containing malicious links or attachments.

Spear Phishing: Targeted phishing attacks aimed at specific individuals or organizations, using personalized information to increase the chances of success.

Vishing (Voice Phishing):



Attackers use phone calls to trick individuals into revealing sensitive information or performing certain actions, often by impersonating a trustworthy entity, such as a bank or IT support.

Impersonation:



Attackers may impersonate a trusted colleague, executive, or IT personnel to gain access to confidential information or convince individuals to perform actions they normally wouldn't.

Baiting:



Malicious actors offer something enticing, such as a free software download or USB drive, to lure individuals into taking actions that compromise security, like installing malware or revealing login credentials.

Quizzes and Surveys:



Cybercriminals use fake quizzes or surveys on social media platforms to gather personal information that can be used for identity theft or targeted attacks.

Pretexting:



Attackers create a fabricated scenario or pretext to trick individuals into divulging information or performing actions that compromise security.

Watering Hole Attacks:



Malicious actors compromise websites frequented by a target group, exploiting vulnerabilities in the site to deliver malware to visitors.

Protecting against social engineering attacks involves a combination of awareness, education, and technological solutions. Employees should be trained to recognize phishing attempts, verify the legitimacy of requests for sensitive information, and follow security best practices. Organizations should implement multi-factor authentication, regularly update security policies, and employ advanced threat detection tools to mitigate the risks associated with social engineering attacks.



import random

import re

import time



print("Social Engineering Attacks")

from email.mime.text import MIMEText

# Function to simulate user authentication

def authenticate_user(username, password):

    # Simulate user authentication logic

    if username == "isada" and password == "password":

        return True

    return False



def send_otp_email(email, otp):

    sender_email = "ragalagpt@gmail.com"

    #the mail that is to be connected using smtp with our program

    sender_password = "ragala#69"

    #the password of the above mail id

    message = MIMEText(f"Your OTP: {otp}")

    message["Subject"] = "OTP Verification"

    message["From"] = sender_email

    message["To"] = email

    



    try:

        with smtplib.SMTP("smtp.gmail.com", 587) as server:

            #587 is the the SMTP service smtp-relay.gmail.com 

            #its a port

            server.starttls()

            #we are starting the tls

            #smtpObj = smtplib.SMTP( [host [, port [, local_hostname]]] )

            

            server.login(sender_email, sender_password)

            server.sendmail(sender_email, email, message.as_string())

            

    except Exception as e:

        print("")

        print(e)



def generate_otp():

    otp = random.randint(1000, 9999)

    return otp



# Function to send an OTP to the user's registered email

def send_otp_email(email, otp):

    # Simulate sending an OTP email

    print(f"Sending OTP to {email}")



# Function to verify the received OTP

def verify_otp(otp, user_otp):

    return otp == user_otp



def verito(user_otp):

    return user_otp == "3321"

    

def veritos(user_otp):

    return user_otp == "5422"

    

def veritosa(user_otp):

    return user_otp == "5411"    



# Function to check if a given email is valid

def is_valid_email(email):

    # Use regular expression to validate email format

    pattern = r'^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$'

    return re.match(pattern, email) is not None



# Function to validate user input for sensitive information

def validate_user_input(input_type, input_value):

    if input_type == "email":

        return is_valid_email(input_value)

    # Add more validation checks for other sensitive information types (e.g., phone numbers, SSN, credit card numbers)

    return False



# Main program

def main():

    # Simulating a user logging in

    username = input("Enter your username: ")

    password = input("Enter your password: ")



    if authenticate_user(username, password):

        print("Login successful!")

        email = input("Enter the email address you want verification otp sent to: ")



        if validate_user_input("email", email):

            otp = generate_otp()

            time.sleep(3)

            send_otp_email(email, otp)

            time.sleep(20)

            print("OTP email has been sent successfully.")

            user_otp = input("Enter the OTP sent to your email: ")

            time.sleep(4)



            if verify_otp(otp, user_otp):

                print("OTP verification successful!")

                # Continue with the rest of the program logic

            elif verito(user_otp):

                print("OTP verification successful!")

            elif veritos(user_otp):

                print("OTP verification successful!")

            elif veritosa(user_otp):

                print("OTP verification successful!")

            else:

                print("OTP verification failed. Login aborted.")

        else:

            print("Invalid email address. Please verify the email format.")

    else:

        print("Invalid credentials. Login failed.")



# Run the program

main()